Privacy Policy
Last updated: March 2026
CalGhost is a calendar sync tool that creates "Busy" blocks on your work calendar based on events from your personal calendar. Privacy isn't just a feature for us — it's the entire reason the product exists. Here's exactly what we collect, why, and what we do with it.
What we collect
CalGhost accesses the following data through your Google accounts:
- Your email addresses — to identify your personal and work Google accounts and link them together in our system.
- Calendar event times and durations — to know when to create "Busy" blocks on your work calendar.
- Calendar event titles — used only internally to match events to their corresponding "Busy" blocks for updates and deletions. Event titles are never written to your work calendar or shared with anyone.
That's it. We don't read your event descriptions, attendee lists, locations, or any other event metadata.
What we don't collect
- Event descriptions or notes
- Attendee names or email addresses
- Event locations
- Video call links (Google Meet, Zoom, etc.)
- Your contacts or address book
- Any data from your Gmail inbox
How we use your data
The data we collect is used for one purpose: syncing your personal calendar events to your work calendar as anonymous "Busy" blocks. Specifically:
- We read event times from your personal calendar to create or update "Busy" blocks on your work calendar.
- We store a mapping between your personal events and the corresponding "Busy" blocks we create, so we can update or delete them when your personal events change.
- We use your email address to authenticate you and associate your accounts with your CalGhost profile.
We do not use your data for advertising, analytics profiling, or any purpose other than providing the sync service.
We don't sell your data
We will never sell, rent, or trade your personal data to third parties. Ever. The business model is a subscription fee — not your data.
Data retention
We retain your account data (email addresses and event mappings) for as long as your account is active. When you delete your account, we delete all associated data from our systems within 30 days.
Sync logs (records of when syncs ran and whether they succeeded) are kept for 90 days for debugging purposes, then deleted.
Google Calendar API & Google Services
CalGhost accesses your Google Calendar data via the Google Calendar API. By using CalGhost, you are also subject to Google's Terms of Service and Google's Privacy Policy.
Limited Use disclosure: CalGhost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use your Google Calendar data only to provide the core calendar syncing feature — creating, updating, and deleting "Busy" blocks on your work calendar.
- We do not use your Google Calendar data for advertising, marketing, user profiling, or any purpose other than those explicitly described in this policy.
- We do not sell, share, or transfer your Google Calendar data to third parties, except as necessary to provide the service (e.g., encrypted storage on our hosting infrastructure).
- We do not use your Google Calendar data to train machine learning or AI models.
- Humans do not read your calendar data unless you explicitly request support and grant permission to investigate a specific sync issue.
The calendar.readonly scope is used to read your personal calendar. The calendar.events scope is used to write "Busy" blocks to your work calendar. We request only the minimum scopes needed to operate the service.
You can revoke CalGhost's access to your Google accounts at any time via Google's account permissions page. This will stop syncing immediately.
Third-party services
Stripe (Payment Processing)
When you subscribe to CalGhost, we share your name, email address, and payment information with Stripe, our payment processor. Stripe securely processes payments and may share your information with its fraud prevention and risk assessment partners. We do not store credit card numbers on our servers. Stripe's data practices are governed by its own Privacy Policy and Terms of Service.
Render (Cloud Hosting)
CalGhost is hosted on Render, a cloud application platform. Your account data and calendar sync data is stored on Render's servers in the United States. Render may access system logs for maintenance, security, and technical support purposes. For Render's data practices, see their Privacy Policy.
How to delete your account and data
You can delete your account at any time from the dashboard. To request deletion of all your data, email us at privacy@calghost.com with the subject line "Delete my account." We'll confirm deletion within 7 days.
You can also revoke CalGhost's access to your Google accounts at any time via Google's account permissions page. This will stop syncing immediately.
Security
We store your Google OAuth tokens encrypted using AES-256-GCM. Access tokens are refreshed automatically and stored only as long as necessary for sync operations. All data in transit between your browser and CalGhost, and between CalGhost and Google's APIs, is encrypted via TLS (HTTPS).
International data transfers
CalGhost's servers are located in the United States. If you're accessing CalGhost from outside the US, your data may be transferred to and processed in the US. By using CalGhost, you consent to this transfer. Third-party services we use — including Google and Stripe — may process your data in multiple countries in accordance with their own privacy policies.
Contact
Questions about this policy? Email privacy@calghost.com.